Thursday, August 21, 2008

Google Security

As seen on Slashdot...

Turn on "Secure Browsing" when you log in to Google or Gmail. A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts was presented at the Defcon hackers' conference in Las Vegas.

Secure browsing is easy enough to accomplish, since Google has upgraded their feature set again, and now allows a single setting to permanently turn on SSL (Secure Socket Layers) and use it for EVERY action involving Gmail, not just logging in.

To turn on Secure Browsing, once you've logged into Gmail, pick "Settings" (Link at the top right hand of the page). When your Settings come up, it'll default to the "General" Tab. Scroll down to the bottom of the page, to "Browser Connection". Pick the radio button next to "Always use https", then save your changes. This WILL log you out of Gmail, so pick the "Sign Out" link, then sign back in.
You should notice your URL has changed slightly from what it was before.
The HTTP should now read https://www.mail.google.com

Stay secure!

1 comment:

Grief

Grief is a silent, indisious destroyer. Grief is a noisy explosion. Grief is a dark, dank pit with no way out. Grief is huge and overwhel...